메뉴
Update GitHub Actions to latest versions with SHA pinning using actions-up CLI
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use bearcli to safely read, search, edit, tag, archive, and organize Bear.app notes. Use when working with Bear notes, note IDs, Bear tags, migrations from Obsidian, note cleanup, or personal knowledge management in Bear.
Use rn-logs to read React Native Metro logs via CDP without MCP overhead. Default output is plain text and safe for non-interactive agent runs.
Automate iOS Simulator using AXe CLI. Use after implementing features to verify they work correctly via UI automation.
Review code changes for quality, security, performance, and maintainability. Use when reviewing PRs, diffs, or code files. Provides structured feedback with severity levels.
Create well-formatted git commits using Conventional Commits format. Use when committing changes, reviewing commit messages, or splitting changes into atomic commits.
Fetch source code for npm packages, Python packages, Rust crates, or GitHub repos to understand their implementation. Use when you need to explore a library's internals.
| name | sha-pin-actions |
| description | Update GitHub Actions to latest versions with SHA pinning using actions-up CLI |
| license | MIT |
Update GitHub Actions in workflows to use SHA-pinned versions for security and reproducibility.
Use actions-up CLI - scans workflows and composite actions, checks for updates, pins to exact commit SHAs.
npx actions-up -y
npx actions-up
npx actions-up --dry-run
npx actions-up --dir .gitea
npx actions-up --exclude "my-org/.*"
npx actions-up --min-age 7
.github/workflows/*.yml and .github/actions/*/action.yml# Before
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
# After
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
# actions-up-ignore-next-line
- uses: actions/checkout@v3
- uses: actions/setup-node@v3 # actions-up-ignore